
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier: jw1tcv/x4opG2UHN2Ojkb3JnmBsGkxBY02qN+WRVtxI=
Subject key identifier: 3A:CE:A7:CF:A6:22:E0:48:D9:FE:56:3C:36:5D:13:7C:08:B2:20:61
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number: 0141
Signing time: Sat 13 Jun 2026 05:20:08 +0000
Manifest this update: Sat 13 Jun 2026 05:20:07 +0000
Manifest next update: Sat 20 Jun 2026 05:20:07 +0000
Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: KhIC4b8KgOZV8llNBp0x66xMeFvI1wEO1Fs0Rs1gBOA=)
2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: eHxVtr7CaVRUMmuegbvUTVOQCFKL9zTAYfh/hkVVLRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Validity
Not Before: Jun 13 05:20:07 2026 GMT
Not After : Jun 20 05:20:07 2026 GMT
Subject: CN=6a2ce888-219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:e1:cf:ec:28:d6:29:1f:d5:73:86:16:fb:
e1:6e:17:32:61:43:29:d3:20:94:0a:09:05:89:83:
ea:6e:fb:6e:83:ee:71:4d:1d:0d:c2:9a:11:d0:3e:
26:da:fa:89:46:6b:17:14:d9:2c:a8:46:92:24:40:
d3:57:9a:63:7d:33:65:43:6c:01:05:6d:96:74:d8:
ff:23:a1:7f:1b:2b:45:5c:24:7e:5f:78:89:19:27:
56:53:0c:3d:78:9c:80:d9:4b:41:d4:1f:41:d6:a3:
c3:b1:3b:32:77:cb:78:81:f3:fb:ae:f2:24:3d:d6:
07:32:5c:32:03:f6:45:c6:0e:44:bd:63:07:22:31:
9d:44:72:e9:46:fc:ef:5a:c3:8c:1a:73:07:5a:64:
63:8e:01:d2:8f:d7:34:4a:b8:12:96:6a:3a:75:d7:
1c:06:b8:ca:97:ed:0f:58:bd:bc:1d:bb:f5:ad:67:
31:95:92:8b:e1:78:27:8d:21:78:f7:6b:7b:a1:94:
d6:6c:31:9a:b0:90:66:b7:4c:25:bd:0c:a9:7c:c7:
73:c6:31:63:11:f8:5f:30:d9:9f:41:c8:7f:81:50:
07:61:65:8d:e9:c9:1c:a7:a7:1b:37:08:62:45:a5:
df:ef:6c:01:ac:43:c2:75:c6:ac:00:12:ef:34:f9:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:A7:CF:A6:22:E0:48:D9:FE:56:3C:36:5D:13:7C:08:B2:20:61
X509v3 Authority Key Identifier:
keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:fd:c8:15:4b:a2:19:56:c8:0d:a1:6a:59:13:8d:89:0b:b8:
e7:23:8a:e9:74:ad:3b:85:eb:18:76:82:cb:5f:61:6b:ea:e1:
6e:91:14:c7:42:b3:6c:ce:00:c9:d8:00:75:eb:f0:26:1d:6b:
e9:47:df:14:2c:2f:31:3a:db:61:94:d7:77:0d:8c:74:92:7b:
35:40:39:78:90:19:f2:00:98:75:28:49:cb:59:3f:6e:8c:98:
ed:4d:2f:a2:e2:fb:8e:98:69:aa:b3:c5:ce:95:b8:f3:eb:f5:
ee:6b:d0:56:52:f8:e3:4a:aa:a3:a5:81:a0:b2:72:e8:ab:40:
eb:16:aa:97:75:a6:3c:68:d7:50:d8:db:23:36:f3:b1:61:93:
f0:6b:97:a8:85:fc:66:53:68:f7:44:42:f8:cc:7a:67:ff:ba:
37:7d:d9:41:8d:95:22:8b:ff:3f:64:a7:b0:85:74:27:91:46:
ba:73:b8:72:da:a1:2e:5e:0c:4e:1f:9e:41:cf:9c:e7:63:25:
05:e4:96:ac:d3:b9:af:9d:a9:4e:9c:8f:70:d3:e8:2f:5e:48:
ca:6a:7a:c8:87:84:90:60:bd:97:2a:18:b9:7a:29:98:88:82:
7f:0b:a3:d2:c0:dc:75:a2:1a:ba:38:c8:78:ce:47:fe:3e:72:
e4:c4:f2:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCMEUxMTAvBgNVBAUTKDk1N0U1MEE3NUZCRTUwMkYzOEUzRURCRjNGNEFBQUU2
NjVBRTE0OEIwHhcNMjYwNjEzMDUyMDA3WhcNMjYwNjIwMDUyMDA3WjAYMRYwFAYD
VQQDEw02YTJjZTg4OC0yMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8xrhz+wo1ikf1XOGFvvhbhcyYUMp0yCUCgkFiYPqbvtug+5xTR0NwpoR0D4m
2vqJRmsXFNksqEaSJEDTV5pjfTNlQ2wBBW2WdNj/I6F/GytFXCR+X3iJGSdWUww9
eJyA2UtB1B9B1qPDsTsyd8t4gfP7rvIkPdYHMlwyA/ZFxg5EvWMHIjGdRHLpRvzv
WsOMGnMHWmRjjgHSj9c0SrgSlmo6ddccBrjKl+0PWL28Hbv1rWcxlZKL4XgnjSF4
92t7oZTWbDGasJBmt0wlvQypfMdzxjFjEfhfMNmfQch/gVAHYWWN6ckcp6cbNwhi
RaXf72wBrEPCdcasABLvNPkbfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrOp8+m
IuBI2f5WPDZdE3wIsiBhMB8GA1UdIwQYMBaAFJV+UKdfvlAvOOPtvz9KquZlrhSL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80RTZDQjRGNjgw
NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVDODQ0LTJfUDBxcTVtV3VG
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xYNVFwMS0tVUM4NDQtMl9QMHFxNW1XdUZJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEIwRS80RTZDQjRGNjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVD
ODQ0LTJfUDBxcTVtV3VGSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg/3IFUuiGVbIDaFqWRONiQu45yOK6XStO4XrGHaCy19ha+rhbpEUx0KzbM4A
ydgAdevwJh1r6UffFCwvMTrbYZTXdw2MdJJ7NUA5eJAZ8gCYdShJy1k/boyY7U0v
ouL7jphpqrPFzpW48+v17mvQVlL440qqo6WBoLJy6KtA6xaql3WmPGjXUNjbIzbz
sWGT8GuXqIX8ZlNo90RC+Mx6Z/+6N33ZQY2VIov/P2SnsIV0J5FGunO4ctqhLl4M
Th+eQc+c52MlBeSWrNO5r52pTpyPcNPoL15Iymp6yIeEkGC9lyoYuXopmIiCfwuj
0sDcdaIaujjIeM5H/j5y5MTyAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:40 2026 by rpki-client